Privacy Policy

1. Scope and our role

This Privacy Policy explains how RealSpiro LLC (“Real Spiro,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information through realspiro.com and our property-intelligence, CRM, communications, reports, presentation, and related services (the “Service”). It also explains your privacy choices and rights.

For account, billing, website, and Real Spiro marketing information, Real Spiro determines why and how the information is processed. When a customer uploads or manages CRM contacts, communications, documents, recordings, or other Customer Content, the customer generally determines the purpose and means of that processing and Real Spiro processes the information on the customer’s instructions. If a Real Spiro customer contacted you, direct requests about that customer’s records to the customer; we will support the customer as required.

2. Information we collect

• Account and profile: name, email, phone number, profession, market, team, workspace role, login identifiers, preferences, and acceptance records.
• Customer Content: CRM contacts and leads; names, phone numbers, email and property addresses; notes, tags, tasks, deals, and appointments; messages; documents; listings; reports; presentations; call recordings, voicemail, transcripts, and summaries; and content submitted to AI features.
• Property and public-record activity: addresses and parcels searched, reports generated, properties saved or monitored, source records returned, and actions taken on results.
• Communications and consent: inbound and outbound email, SMS, and call metadata; delivery status; opt-ins, opt-outs, DNC status, consent text and timestamp; IP address and user agent associated with a consent; support inquiries; and feedback.
• Billing: plan, seat count, subscription status, invoices, transaction identifiers, billing authorization, and coverage acknowledgement. Payment-card information is submitted directly to our payment processor; Real Spiro does not receive full card numbers.
• Device, usage, and diagnostics: IP address, browser, operating system, device type, pages, referral and campaign parameters, feature events, timestamps, approximate location inferred from IP or phone area code, errors, security events, and performance data.
• Information from others: public agencies and records, licensed property and contact-data providers, integrations you connect, workspace administrators, service providers, referral partners, and people who submit information through customer forms.

3. How we use information

• Provide searches, reports, CRM, communications, monitoring, presentations, integrations, AI-assisted tools, support, and other requested features.
• Create and secure accounts, authenticate users, prevent abuse and fraud, enforce plan limits, and investigate incidents.
• Process purchases, obtain and preserve billing authorization, administer subscriptions, and maintain tax and accounting records.
• Deliver operational notices, requested alerts, support messages, and marketing where permitted, and honor opt-outs.
• Measure performance, understand feature use, debug problems, and improve usability and reliability.
• Comply with law, respond to legal process, protect rights and safety, and enforce our Terms of Service.
• Complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and notice obligations.

We do not use Customer Content to train a general-purpose AI model for sale to others. AI providers receive content as needed to return the requested output, subject to our provider arrangements and their applicable service terms.

5. When we disclose information

We disclose information only as needed for the purposes described below:

• Cloud operations and security providers: account information, Customer Content, and device or diagnostic information as needed for hosting, databases, authentication, storage, backups, email delivery, analytics, monitoring, support, and abuse prevention.
• Payment processors: billing and transaction information as needed for checkout, subscription administration, payment authorization, fraud prevention, invoices, and payment records.
• Communications providers: contact information, message or call content, consent records, and delivery metadata as needed to route email, calls, SMS, voicemail, recordings, and related events, including through providers a customer connects.
• AI and content-processing providers: prompts, documents, audio, requested context, and generated outputs as needed to perform an AI-assisted or document-processing feature you request.
• Mapping, public-record, and licensed-data providers: addresses, parcels, search criteria, and related query information as needed to resolve locations, display maps, and return property or contact results.
• Advertising and measurement partners: limited online identifiers and events only when optional advertising measurement is authorized as described above.
• Your direction: workspace members, recipients of messages, people with links you publish, integrations you connect, and other parties you direct us to contact or disclose information to.
• Legal and safety: regulators, courts, law enforcement, or others when reasonably necessary to comply with law, enforce agreements, investigate fraud or security issues, or protect rights, property, and safety.
• Corporate transaction: advisers, counterparties, lenders, and a successor in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets.

These categories explain who may receive information and why without publishing security-sensitive technical architecture. Where applicable law or a written business agreement requires additional recipient or subprocessor information, we provide it through verified privacy requests, data-processing terms, order forms, or confidential notices.

Providers may process information in the United States and other countries. Their privacy and security laws may differ from those where you live. Where required, we use contractual or other approved transfer safeguards.

6. CRM outreach, recordings, and Real Spiro SMS

Customers control the contacts and outreach they initiate through the CRM and are responsible for having required permission. We process recipient information, message content, call metadata, recordings, transcripts, consent records, and opt-outs to provide the customer’s requested communication, apply configured compliance controls, maintain logs, and respond to STOP or unsubscribe requests. A customer may remain responsible for its own copy after Real Spiro deletes an account-level record.

Separately, if you opt in to receive SMS/MMS from Real Spiro about Real Spiro, we use your number, consent record, messages, and delivery data for that program. Consent is not a condition of purchase. Reply STOP to opt out or HELP for help. We preserve suppression and consent records as reasonably necessary to prove and honor your choice. We do not sell or share Real Spiro SMS opt-in data with third parties or affiliates for their own marketing.

7. Data retention

We retain information for the shortest period reasonably necessary for the purposes described above, taking into account account status, customer instructions, security, dispute, audit, tax, communications, and legal obligations. Retention varies by record:

• Account and Customer Content generally remain while the account or workspace is active and until deletion by an authorized user.
• Shared workspace records remain under the workspace owner’s control after an individual member leaves or deletes their profile.
• Deleted primary data may remain in restricted backups until overwritten on a rolling schedule, generally within approximately 30 days, unless legal preservation is required.
• Billing, authorization, security, fraud, legal, consent, DNC, and opt-out records may be kept longer where reasonably necessary to meet legal obligations, establish rights, resolve disputes, and ensure an opt-out remains honored.
• Public records and source data may remain available from their original source even after removal from your account.

8. Account deletion and exports

On the web, go to Account → Delete account or Settings → Delete account. Deletion cancels an active subscription, deletes the login and personal profile, and begins deletion of account-level content, subject to the retention limits above. Shared workspace records remain with the workspace. A sole workspace owner may need to transfer ownership before deletion when other members remain. Deletion is irreversible. You may also contact us for help. Use available export features before deleting information you need to keep.

9. Your privacy rights

Depending on where you live and whether an applicable law covers Real Spiro, you may have rights to request access, categories and specific pieces of personal information, correction, deletion, portability, restriction or objection, and information about disclosures. You may also have rights to opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; withdraw consent; and appeal a denied request. We will not unlawfully discriminate against you for exercising a privacy right.

Submit a request to info@realspiro.com with the subject “Privacy Request.” Describe the right and the account or email involved. We may verify identity and authority before acting and may deny or limit a request where permitted by law. Authorized agents must provide proof of authority, and we may still verify the consumer directly. If we deny an appealable request, reply with “Privacy Appeal.”

For Customer Content controlled by a Real Spiro customer, contact that customer first. For optional advertising, use the Privacy choices control above or Global Privacy Control. Marketing email can be stopped through its unsubscribe method; Real Spiro SMS can be stopped by replying STOP.

10. Security

We use administrative, technical, and physical safeguards designed for the nature of the information, including encrypted transport, provider encryption at rest, access controls, tenant isolation, rate limits, logging, and security monitoring. No internet service or storage system is completely secure, and we cannot guarantee absolute security. Protect credentials, limit access to your workspace, review public links before sharing, and notify us promptly of suspected unauthorized access.

11. Children

The Service is intended for adults and is not directed to children under 13 or offered for use by anyone under 18. We do not knowingly collect personal information directly from a child under 13. If you believe a child has provided account information, contact us so we can investigate and delete it as required. Customers must not use the Service to collect children’s information without all legally required authority and consent.

12. Third-party sites and public sources

The Service links to public agencies, maps, integrations, and other third-party services. Their privacy practices govern information you provide directly to them. Removal from Real Spiro does not remove a public record or information controlled by another service. Contact the original source to correct or suppress source data where applicable.

13. Changes to this policy

We may update this Policy as the Service, providers, or law changes. We will update the effective date and provide email, in-product, or other notice of material changes where required. We will request new consent before materially expanding a consent-based use where law requires it.

14. Contact us